PRIVACY NOTICE.
How we use personal information when you browse our website, contact us, complete the Sales Burnout Scorecard or take part in a corporate programme.
Sales Is Tough is operated by The Highest Peaks Group Ltd ("we", "us" and "our"). We help sales organisations understand and respond to sustained work pressure. This notice explains how we use personal information when you browse our website, contact us, complete the Sales Burnout Scorecard or take part in a corporate programme.
1. Who is responsible for your information?
The Highest Peaks Group Ltd, registered in England and Wales under company number 16887002, is responsible for the personal information it uses for its own website, enquiries, Scorecard and confidential support services. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact us about privacy at info@salesistough.com.
When an employer commissions a team programme, that employer is separately responsible for its own employee records and workplace decisions. The parties’ exact data-protection responsibilities will be explained to participants before that programme starts. ScoreApp processes Scorecard data on our behalf under its subscriber terms. We do not give employers access to our individual Scorecard account or confidential participant records.
2. What information do we collect?
Website and enquiry details: your name, business contact details, organisation, enquiry and messages, and relevant technical information about website use.
Scorecard details: name, email address, any optional contextual answers, questionnaire responses, scores, dates and any communications needed to provide your report.
Confidential support details, if you choose to use support: appointment information and the minimum notes required to deliver, supervise and safeguard the service.
Corporate client details: business contact details, contracts, invoices, correspondence and agreed non-identifying team-level findings.
Some Scorecard answers and support information may reveal information about your mental health or wellbeing. Where that is the case, it is special category personal data and we apply additional protections.
3. Why do we use it, and on what legal grounds?
| Activity | Purpose and UK GDPR lawful basis |
|---|---|
| Website/contact enquiries | To respond to you and manage business enquiries — legitimate interests (Article 6(1)(f)); where appropriate, taking steps at your request before a contract (Article 6(1)(b)). |
| Voluntary personal Scorecard | To calculate and deliver your private report — consent (Article 6(1)(a)); and explicit consent for any health information (Article 9(2)(a)). |
| Optional corporate team analysis | To include your answers in aggregated, disclosure-checked team findings — separate voluntary consent and, for health data used to create those findings, explicit consent, where applicable and demonstrably freely given. |
| Confidential support | To arrange and provide requested support — performance of a contract with you (Article 6(1)(b)) where you arrange support directly with us, or legitimate interests (Article 6(1)(f)) where support is funded by your employer; and your explicit consent (Article 9(2)(a)) for any health information. We will explain the relevant basis before support starts. |
| Business administration/security | To manage contracts, accounts, security and lawful records — legitimate interests, contract and/or legal obligation as appropriate. |
| Optional marketing | To send you promotional news only when permitted by UK GDPR and PECR; Scorecard registration is not treated as marketing consent. |
For employees, consent must involve a real choice. Participation is voluntary and choosing not to take part must not disadvantage you. If a particular workplace programme cannot offer that choice, we will assess and explain the appropriate alternative legal basis before collecting any responses.
4. What does your employer receive?
If you complete the Scorecard privately, we do not send your results to your employer. For a company-funded programme, we do not provide employers with named responses, personal scores, confidential support notes, identifiable comments or lists of who sought support. We may provide team-level findings only where a disclosure-risk review shows that individuals cannot reasonably be identified. We do not publish numerical team findings for groups with fewer than ten valid participants, and even where there are ten or more we may combine or suppress information to protect participants.
We do not use individual Scorecard responses to recommend employment, performance-management, disciplinary or remuneration decisions. If an employer requests identifiable information about you, we will not release it merely because the employer paid for the programme.
5. Who else may receive information?
We use trusted service providers to host our website, operate the Scorecard, send service emails, manage business administration and secure our systems. ScoreApp, operated by Hyper Targeted Marketing Limited, acts as a processor of the Scorecard information collected under our account. Its published terms identify subprocessors used for hosting, security, email and certain optional features. We only enable optional features after considering their data-protection implications.
ScoreApp also states that it may use appropriately anonymised and aggregated data for its own statistical research and service development, without using identifiable participant data for those purposes. We may share limited personal information with appropriately qualified advisers or emergency services where lawful and necessary to respond to a serious safeguarding concern; where we have a legal obligation to do so; or with your separate, informed permission. We will disclose no more than reasonably necessary and record the reasons for a disclosure.
6. International access and transfers
Our suppliers may process or access information outside the UK. ScoreApp’s published terms, for example, list a US-based email-sending provider for service emails and other overseas providers for optional features. Where UK restricted-transfer rules apply, we use the relevant UK adequacy rules or appropriate contractual and risk-assessment safeguards. You can ask info@salesistough.com for information about the safeguards applicable to your data.
7. How long do we keep information?
We keep personal information only for as long as necessary for the purpose for which it was collected, in line with UK data protection law and any other legal requirements, and then securely delete or anonymise it. Financial records are kept for the statutory accounting periods. We review records periodically and seek deletion from processors where appropriate. Service-provider backups may remain for their documented overwrite period.
8. Security and confidentiality
Access to identifiable answers is limited to authorised people who require it to provide the service, under confidentiality obligations. We use appropriate access controls, strong authentication and secure communication and storage practices. Team reporting is reviewed for identification risks before release. No online service can guarantee absolute security.
9. Your choices and rights
Depending on the circumstances, you may ask to access, correct, erase or restrict personal information, object to certain uses, or request data portability. Where we rely on consent, you can withdraw it at any time without disadvantage by contacting info@salesistough.com. Withdrawal does not necessarily make earlier lawful processing unlawful. If you withdraw from an ongoing programme, we will explain which information can be deleted and whether any legal retention requirement applies.
If you have a data-protection concern, please contact info@salesistough.com. We will acknowledge a formal data-protection complaint within 30 days, investigate it and provide a response without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk.
10. Automated scores and important limitations
The Scorecard automatically calculates and displays results from your questionnaire answers. It is a self-report educational and wellbeing tool, not a medical diagnosis or an automated employment decision. We do not use the scores to make decisions with legal or similarly significant effects on individuals.
11. Cookies and third-party websites
Our website uses cookies and similar technologies. Details of the cookies used, their purposes, lifetimes and available choices are explained in our Cookie Policy. Where UK law requires consent for non-essential technologies, they will not be activated before valid consent is obtained. The Scorecard and other linked services may have their own service-specific notices.
12. Changes to this notice
We may update this notice when our services, suppliers or legal obligations change. We will publish the updated date and explain material changes where appropriate.